6 ms·

That they've been around for long enough for proper implementations in all major languages to exist, their pitfalls being documented and a lot of devs have some

That they've been around for long enough for proper implementations in all major languages to exist, their pitfalls being documented and a lot of devs have some familiarity with it. With that they are a better choice than most homebrew/framework-specific solutions. There are some other established (/"standardized") solutions, which might fit your use-case better though, but most of them lag behind JWT in implementations/dev familiarity.

goodpoint 4y ago
Spot on. Even better if they used a better serialization protocol than stupid JSON.
- fireflash38 4y ago
  JSON really is the worst serialization, except for all the others.
- Sohcahtoa82 4y ago
  What's wrong with JSON?
  - goodpoint 4y ago
    It requires a complex scanner with a stack to track nested data structures. Not good for security nor speed in the use-case of a auth token!
  - Aeolun 4y ago
    It doesn’t have a native date type. And you cannot have comments.